$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json) Hash identifier: d1VlDjvrRJRcBVr6bJHXGOTaGKMdcAmkkzKcTQikc2g= Subject key identifier: CD:9C:BF:27:22:44:2B:2D:FA:6F:4B:42:0C:1D:FD:94:DE:FC:61:C9 Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft Manifest number: 36 Signing time: Sun 27 Apr 2025 06:25:14 +0000 Manifest this update: Sun 27 Apr 2025 06:25:14 +0000 Manifest next update: Sun 04 May 2025 06:25:14 +0000 Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: 5K24ZmUxMsFdAQqqxPLJGGC7MQe25scd0vdDuuxr6C0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Validity Not Before: Apr 27 06:25:14 2025 GMT Not After : May 4 06:25:14 2025 GMT Subject: CN=680dcdca-f111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:c8:ab:f6:e8:85:fb:e1:64:c9:06:3f:b6: 92:29:8a:33:03:3c:39:f4:45:77:f1:44:2c:90:66: ad:c0:93:04:db:28:28:f5:f8:6a:56:c0:3c:3f:90: e5:31:b8:74:d3:68:c3:be:6f:e6:73:3f:08:f4:01: 07:c4:0e:bc:be:bc:62:fc:6c:6e:5a:70:d2:f6:3f: 83:1b:62:fe:c4:5e:ae:a8:35:4e:8a:6c:cf:0b:f0: 37:49:9d:eb:4b:f8:c9:ff:69:c6:2a:db:fc:82:27: a4:25:41:a7:61:c0:f0:b4:6e:30:88:2c:ab:da:81: 66:70:9e:f1:60:f7:ac:14:a1:85:45:3b:16:be:2b: 9e:20:c7:ce:d8:57:10:d8:0d:28:28:97:9f:be:07: c1:ec:d5:fb:9c:3f:f5:f1:41:26:d8:b4:ba:41:8b: f6:cd:2a:4d:5a:0a:69:ff:a5:61:1c:27:06:9b:48: 86:2e:4b:cb:ad:ad:31:64:f2:2b:e4:4f:6b:a0:60: 6f:c5:2f:78:ca:82:08:20:91:d3:3b:da:c9:77:f8: f5:8b:47:da:9e:e7:d5:e8:4e:db:1d:4c:70:8c:96: b9:c0:35:60:b8:05:7a:3d:38:d2:87:f3:af:c6:23: 13:5e:6d:b6:25:52:2e:4f:d7:a8:ad:96:00:1d:a1: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9C:BF:27:22:44:2B:2D:FA:6F:4B:42:0C:1D:FD:94:DE:FC:61:C9 X509v3 Authority Key Identifier: keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ea:33:86:db:d7:c1:23:13:80:1e:44:3f:62:7d:ee:03:17: 3a:1b:f3:b7:cc:62:49:e8:05:39:f3:b3:f3:c6:be:ff:46:7e: 69:13:87:68:8d:a0:ed:14:9a:b7:8e:3a:0c:8d:dd:5f:32:35: 70:cf:50:28:2d:0b:56:2d:22:65:83:4f:76:92:49:29:c6:c4: 8d:29:d2:8c:fb:bb:be:90:57:3f:8e:10:e4:30:92:07:75:1a: 5d:43:11:da:75:73:e9:16:5a:24:fa:4c:56:b7:0c:ba:78:61: 6c:b5:ef:81:52:25:1e:db:52:cd:4d:b4:aa:c5:82:01:02:76: 87:79:68:5e:ab:92:bd:08:1f:a3:44:4f:cc:f3:6b:77:5e:2d: 34:79:89:94:00:be:87:54:8d:27:27:94:68:9e:08:18:41:38: 3d:9c:0b:cb:d2:c5:58:dc:41:3f:48:50:ee:ee:07:0d:8c:10: 83:3e:56:cd:ba:62:35:ba:94:a1:ce:86:8e:f0:3c:17:5e:51: 92:9a:ae:1e:25:50:3f:52:0e:af:ba:4e:47:5c:dd:70:4d:ff: 91:fa:a7:32:a9:d4:1b:c3:3e:30:3d:51:fc:36:2a:b7:eb:4c: e0:e6:6c:de:91:4d:11:89:d2:3d:19:3e:a4:10:93:02:25:6e: 19:cd:e2:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUY5QzExMC8GA1UEBRMoQzQ0MzlEQzAxRTIwRDE2Q0M1QTBFRjk4MTdENDFCRjYy ODk3NjUyNDAeFw0yNTA0MjcwNjI1MTRaFw0yNTA1MDQwNjI1MTRaMBgxFjAUBgNV BAMTDTY4MGRjZGNhLWYxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZ8ir9uiF++FkyQY/tpIpijMDPDn0RXfxRCyQZq3AkwTbKCj1+GpWwDw/kOUx uHTTaMO+b+ZzPwj0AQfEDry+vGL8bG5acNL2P4MbYv7EXq6oNU6KbM8L8DdJnetL +Mn/acYq2/yCJ6QlQadhwPC0bjCILKvagWZwnvFg96wUoYVFOxa+K54gx87YVxDY DSgol5++B8Hs1fucP/XxQSbYtLpBi/bNKk1aCmn/pWEcJwabSIYuS8utrTFk8ivk T2ugYG/FL3jKggggkdM72sl3+PWLR9qe59XoTtsdTHCMlrnANWC4BXo9ONKH86/G IxNebbYlUi5P16itlgAdocajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzZy/JyJE Ky36b0tCDB39lN78YckwHwYDVR0jBBgwFoAUxEOdwB4g0WzFoO+YF9Qb9iiXZSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0NEMkNBOEY4RDNF QTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEVPZHdCNGcwV3pGb08tWUY5UWI5aWlYWlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6 Rm9PLVlGOVFiOWlpWFpTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGDqM4bb18EjE4AeRD9ife4DFzob87fMYknoBTnzs/PGvv9GfmkTh2iN oO0UmreOOgyN3V8yNXDPUCgtC1YtImWDT3aSSSnGxI0p0oz7u76QVz+OEOQwkgd1 Gl1DEdp1c+kWWiT6TFa3DLp4YWy174FSJR7bUs1NtKrFggECdod5aF6rkr0IH6NE T8zza3deLTR5iZQAvodUjScnlGieCBhBOD2cC8vSxVjcQT9IUO7uBw2MEIM+Vs26 YjW6lKHOho7wPBdeUZKarh4lUD9SDq+6Tkdc3XBN/5H6pzKp1BvDPjA9Ufw2Krfr TODmbN6RTRGJ0j0ZPqQQkwIlbhnN4mI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net